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CLAIMS 

claim: 

A method for preventing unauthorized use of digital content data comprising: 
subdividing the digital content data into data segments; 
modifying the data segments with second data to generate modified data; and 
storing the modified data at predetermined memory locations. 

The method of claim 1 wherein the digital data comprises data types selected from a 
group consisting of audio, video, documents, text and software. 

The method of claim 1 wherein the data segments are of a variable length 

The method of claim 1 wherein the second data comprises a randomly generated data 
stream. 

The method of claim 1 wherein the second data comprises portions of the digital content 
data. 

The method of claim 1 further comprising encrypting the modified data and storing the 
encrypted modified data. 

The method of claim 6 further comprising encrypting the modified data with an 
encryption key. 

The method of claim 7 further comprising encrypting the encryption key. 

The method of claim 8 fixrther comprising storing the encryption key with the encrypted 
modified data at the predetermined memory locations. 
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The method of claim 9 further comprising partitioning the encryption key among the 
encrypted modified data. 

The method of claim 1 wherein the predetermined memory locations are selected as the 
locations at which the digital content data was originally stored. 

The method of claim 1 wherein the digital content data comprises first and second digital 
content data and wherein the predetermined memory locations are selected as 
combinations of the locations at which the first and second digital content data were 
originally stored. 

The method of claim 1 further comprising generating a map of locations at which the 
modified data is stored. 

The method of claim 13 further comprising storing the map of locations at the 
predetermined memory locations. 

The method of claim 1 wherein the memory locations reside on a system and further 
comprising: 

scanning the system to determine available memory locations; 
selecting target memory locations within the available memory locations at which 
to store the modified data; and 

storing the modified data at the target memory locations. 

The method of claim 15 wherein a subset of available memory locations are located 
within file system locations 

The method of claim 15 wherein a subset of available memory locations are located 
outside file system locations, 
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The method of claim 15 further comprising generating a map of the target memory 
locations. 

The method of claim 18 further comprising storing the map of target memory locations at 
the target memory locations. 

The method of claim 1 further comprising: 

retrieving the modified data firom the predetermined memory locations; and 
de-interleaving the data segments based on the second data to generate original 

digital content data. 

The method of claim 1 wherein the memory locations reside on a system and wherein a 
table of contents identifies files stored on the system, and wherein a subset of the memory 
locations used for storing the modified data are between memory locations used by files 
stored on the system, as identified by the table of contents. 

The method of claim 1 wherein the memory locations reside on a system and wherein a 
table of contents identifies files stored on the system, and wherein a subset of the memory 
locations used for storing the modified data are exclusive of memory locations of files 
stored on the system, as identified by the table of contents. 

The method of claim 1 wherein the memory locations reside on a system and wherein a 
table of contents identifies files stored on the system and identifies memory locations at 
which the files are stored, and wherein the modified data are stored at memory locations 
occupied by the files, as identified by the table of contents. 

The method of claim 23 further comprising, if an authorized access of a file replaced by 
the modified data is determined, the file is accessed. 
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The method of claim 1 wherein modifying the data segments comprises interleaving the 
data segments with the second data to generate interleaved data. 

The method of claim 1 wherein modifying the data segments with second data comprises 
tokenizing the data segments with token data. 

The method of claim 26 wherein the token data comprises lexical equivalents of 
assembly language commands. 

The method of claim 27 wherein the lexical equivalents are consumed by a system 
interpreter, in turn generating alternative assembly language commands selected to 
obfuscate the digital content data in the event of an unauthorized access. 

A method for preventing unauthorized use of digital content data in a system having 
memory locations comprising: 

subdividing the digital content data into data segments; 

modifying the data segments with second data to generate modified data; 

scanning the system to determine available memory locations; 

selecting target memory locations within the available memory locations at which 
to store the modified data; and 

storing the modified data at the target memory locations. 

The method of claim 29 wherein a subset of available memory locations are located 
within file system locations. 

The method of claim 29 wherein a subset of available memory locations are located 
outside file system locations. 

The method of claim 29 further comprising generating a map of the target memory 
locations. 
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3 3 The method of claim 32 further comprising storing the map of target memory locations at 
the target memory locations. 

5 34 The method of claim 29 wherein the digital data comprises data types selected from a 
group consisting of audio, video, documents, text and software. 

3 5 The method of claim 29 wherein the data segments are of a variable length 

10 36 The method of claim 29 wherein the second data comprises a randomly generated data 
stream. 

".IKS' 

: ■ =C 37 The method of claim 29 wherein the second data comprises portions of the digital content 
data. 

IB 

;! ^. 38 The method of claim 29 further comprising encrypting the modified data and storing the 
encrypted modified data. 

;^ 39 The method of claim 38 further comprising encrypting the modified data with an 
20 encryption key. 

40 The method of claim 39 further comprising encrypting the encryption key. 

41 The method of claim 40 further comprising storing the encryption key with the encrypted 
25 modified data at the predetermined memory locations. 

42 The method of claim 4 1 further comprising partitioning the encryption key among the 
encrypted modified data. 
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The method of claim 29 wherein the predetermined memory locations are selected as the 
locations at which the digital content data was originally stored. 

The method of claim 29 wherein the digital content data comprises first and second 
digital content data and wherein the predetermined memory locations are selected as 
combinations of the locations at which the first and second digital content data were 
originally stored. 

The method of claim 29 fiirther comprising generating a map of locations at which the 
modified data is stored. 

The method of claim 45 further comprising storing the map of locations at the 
predetermined memory locations. 

The method of claim 29 further comprising: 

retrieving the modified data fi^om the predetermined memory locations; and 
de-interleaving the data segments based on the second data to generate original 

digital content data. 

The method of claim 29 wherein the memory locations reside on a system and wherein a 
table of contents identifies files stored on the system, and wherein a subset of the memory 
locations used for storing the modified data are between memory locations used by files 
stored on the system, as identified by the table of contents. 

The method of claim 29 wherein the memory locations reside on a system and wherein a 
table of contents identifies files stored on the system, and wherein a subset of the memory 
locations used for storing the modified data are exclusive of memory locations of files 
stored on the system, as identified by the table of contents. 
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the method of claim 29 wherein the memory locations reside on a system and wherein a 
table of contents identifies files stored on the system and identifies memory locations at 
which the files are stored, and wherein the modified data are stored at memory locations 
occupied by the files, as identified by the table of contents. 

The method of claim 50 further comprising, if an authorized access of a file replaced by 
the modified data is determined, the file is accessed. 

The method of claim 29 wherein modifying the data segments comprises interleaving the 
data segments with the second data to generate interleaved data. 

The method of claim 29 wherein modifying the data segments with second data 
comprises tokenizing the data segments with token data. 

The method of claim 53 wherein the token data comprises lexical equivalents of 
assembly language commands. 

The method of claim 54 wherein the lexical equivalents are consumed by a system 
interpreter, in turn generating altemative assembly language commands selected to 
obfuscate the digital content data to deter unauthorized access. 

A method for preventing unauthorized use of digital content data hosted on a system 
comprising: 

modifying the digital content data with saturation data to generate modified data; 

and 

storing the modified data at predetermined memory locations on the system to 
deter unauthorized access of the digital content data. 
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The method of claim 56 further comprising subdividing the digital content data into data 
segments and modifying the data segments. 

The method of claim 56 further comprising: 

determining whether an unauthorized attempt at accessing the digital content data 

occurs; 

in the event of unauthorized access, generating saturation traffic on the system to 
deter the unauthorized activity. 

The method of claim 58 wherein the saturation traffic comprises system commands that 
burden system resources. 

The method of claim 59 wherein the system commands are generated as a function of 
activity utilizing the system resources subject to the unauthorized access. 

The method of claim 58 wherein determining whether an unauthorized attempt at 
accessing the digital content data occurs comprises monitoring activity of the system 
hosting the digital content data and determining whether the activity is inconsistent with 
the type of digital content data being hosted. 

The method of claim 56 further comprising interleaving the digital content data with 
second data to generate interleaved data. 

The method of claim 56 further comprising tokenizing the digital content data with token 
data. 

A method for preventing unauthorized use of digital content data hosted on a system 
wherein a table of contents identifies files stored at memory locations of the system 
comprising: 
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identifying at the table of contents a first memory location referring to a location 
at which at which first data file is stored; 

modifying the first memory location in the table of contents to refer to a second 
data file at a second location; and 

upon an attempt at access by the system of the first data file, accessing the second 
data file if the attempt is unauthorized. 

The method of claim 64 further comprising accessing the first data file if the attempt is 
authorized. 

A method for preventing unauthorized use of digital content data hosted on a system 
wherein a table of contents identifies files stored at memory locations of the system 
comprising: 

identifying at the table of contents a first memory location referring to a location 
at which at which first data file is stored; 

copying the contents of the first data file to a second memory location; and 
replacing the first data file with a second data file; 

upon an attempt at access by the system of the first data file, accessing the second 
data file if the attempt is unauthorized. 

The method of claim 66 further comprising accessing the first data file if the attempt is 
authorized. 

A method for preventing unauthorized use of digital content data hosted on a system 
comprising: 

monitoring an operating system interface of the system to determine access of 
operating system resources; and 

repeatedly generating a shim on the operating system interface to deter 
unauthorized access of the digital content data. 
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69 The method of claim 68 wherein the shim is generated in the event of an unauthorized 



access. 



70 The method of claim 68 wherein the shim is repeatedly generated periodically, each shim 
5 being regenerated following a predetermined time period. 

71 The method of claim 68 wherein the shim comprises first and second shims generated on 
the operating system interface for operation in fi*ont of and behind the unauthorized 
access respectively. 

10 

i 72 The method of claim 68 wherein generating the shim comprises initiating an operation 
,3 that generates saturation data. 

73 A method for preventing unauthorized use of digital content data hosted on a system 
fs comprising: 

substituting a portion of the digital content data with token data to generate 
- tokenized data; and 

I storing the tokenized data at predetermined memory locations on the system to 

i deter unauthorized access of the digital content data. 

20 

74 The method of claim 73 further comprising subdividing the digital content data into data 
segments and substituting a portion of the data segments. 

75 The method of claim 73 further comprising interleaving the digital content data with 
25 second data to generate interleaved digital content data. 

76 The method of claim 75 further comprising: 

determining whether an unauthorized attempt at accessing the digital content data 

occurs; 
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in the event of unauthorized access, generating saturation traffic on the system to 
deter the unauthorized activity. 

77 The method of claim 76 wherein the saturation traffic comprises system commands that 
5 burden system resources. 

78 The method of claim 73 wherein the token data comprises lexical equivalents of 
assembly language commands. 

10 79 The method of claim 78 wherein the lexical equivalents are consumed by a system 
interpreter, in turn generating alternative assembly language commands selected to 
obfiascate the digital content data to deter unauthorized access thereof 

80 A method for preventing unauthorized use of digital content data hosted on a system 
ts comprising: 

'r--: monitoring an operating system interface operating on the system and the digital 

S content data at an assassin process to determine whether an unauthorized attempt at 

••^ accessing the digital content data occurs; and 

f in the event of unauthorized access, deterring the unauthorized access and 

20 communicating the unauthorized access to the operating system interface. 

8 1 The method of claim 80 wherein the assassin process further determines whether 
secondary assassin processes are located on the operating system interface, and, if so, 
causes the secondary assassin processes to exit. 



25 



82 The method of claim 80 wherein deterring unauthorized access comprises generating 
saturation data to deter the unauthorized activity. 
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The method of claim 80 wherein the step of monitoring comprises assembling a list of 
authorized accesses and comparing a newly generated process with the Ust to determine a 
status of the newly generated process as being authorized or unauthorized. 

The method of claim 83 wherein the step of monitoring further tracks descendant 
processes of processes on the list to determine the status of the descendant process. 

A method for preventing unauthorized use of digital content data in a system having 
memory locations comprising: 

scanning the system to determine available memory locations based on a file 
system identifying locations of files on the system; 

selecting target memory locations within the available memory locations at which 
to store the digital content data; and 

storing the digital content data at the target memory locations. 

The method of claim 85 wherein a subset of available memory locations are located 
within files identified by the file system locations. 

The method of claim 85 wherein a subset of available memory locations are located 
between files identified by the file system locations. 

The method of claim 85 wherein a subset of available memory locations are located 
outside the file system locations. 

A system for preventing unauthorized use of digital content data comprising: 

a subdividing unit for subdividing the digital content data into data segments; 
a modification unit for modifying the data segments with second data to generate 

modified data; and 

a storage unit for storing the modified data at predetermined memory locations. 
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The system of claim 89 wherein the data segments are of a variable length 

The system of claim 89 wherein the second data comprises a randomly generated data 
stream. 

The system of claim 89 wherein the second data comprises portions of the digital content 
data. 

The system of claim 89 further comprising an encryption unit for encrypting the modified 
data and storing the encrypted modified data. 

The system of claim 93 wherein the encryption unit further encrypts the modified data 
with an encryption key. 

The system of claim 94 wherein the encryption unit fiirther encrypts the encryption key. 

The system of claim 95 wherein the storage unit farther stores the encryption key with 
the encrypted modified data at the predetermined memory locations. 

The system of claim 96 farther comprising a partitioning unit for partitioning the 
encryption key among the encrypted modified data. 

The system of claim 89 wherein the predetermined memory locations are selected as the 
locations at which the digital content data was originally stored. 

The system of claim 89 wherein the digital content data comprises first and second digital 
content data and wherein the predetermined memory locations are selected as 
combinations of the locations at which the first and second digital content data were 
originally stored. 
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The system of claim 89 further comprising a map generator for generating a map of 
locations at which the modified data is stored. 



101 The system of claim 100 wherein the storage unit further stores the map of locations at 
5 the predetermined memory locations. 

1 02 The system of claim 89 wherein the memory locations reside on the system and further 
comprising: 

a scanner for scanning the system to determine available memory locations; 
10 a selector for selecting target memory locations within the available memory 

''^ locations at which to store the modified data; and 

^3 wherein the storage unit stores the modified data at the target memory locations. 

9 ' 1 03 The system of claim 1 02 wherein a subset of available memory locations are located 
r;;Ij5 within file system locations 

'p 1 04 The system of claim 1 02 wherein a subset of available memory locations are located 
p - oiitside file system locations. 

20 1 05 The system of claim 1 02 further comprising a map generator for generating a map of the 
target memory locations. 

106 The system of claim 105 wherein the storage unit stores the map of target memory 
locations at the target memory locations. 

25 

1 07 The system of claim 89 further comprising: 

means for retrieving the modified data from the predetermined memory locations; 

and 

means for de-interleaving the data segments based on the second data to generate 
30 original digital content data. 
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108 The system of claim 89 wherein the memory locations reside on a system and wherein a 
table of contents identifies files stored on the system, and wherein a subset of the memory 
locations used for storing the modified data are between memory locations used by files 

5 stored on the system, as identified by the table of contents. 

109 The system of claim 89 wherein the memory locations reside on a system and wherein a 
table of contents identifies files stored on the system, and wherein a subset of the memory 
locations used for storing the modified data are exclusive of memory locations of files 

10 stored on the system, as identified by the table of contents. 

1 1 0 The system of claim 89 wherein the memory locations reside on a system and wherein a 
table of contents identifies files stored on the system and identifies memory locations at 
which the files are stored, and wherein the modified data are stored at memory locations 

^J5 occupied by the files, as identified by the table of contents. 

2 111 The system of claim 89 wherein the modification unit modifies the data segments 
i,r comprises interleaving the data segments with the second data to generate interleaved 

!^ data. 
20 

112 The system of claim 89 wherein the modification unit modifies the data segments with 
second data comprises tokenizing the data segments with token data. 

1 1 3 The system of claim 1 1 2 wherein the token data comprises lexical equivalents of 
25 assembly language commands. 

114 The system of claim 113 wherein the lexical equivalents are consumed by a system 
interpreter, in tum generating alternative assembly language commands selected to 
obfuscate the digital content data in the event of an unauthorized access. 

30 
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115 A system for preventing unauthorized use of digital content data in a system having 
memory locations comprising: 

means for subdividing the digital content data into data segments; 

means for modifying the data segments with second data to generate modified 

5 data; 

means for scanning the system to determine available memory locations; 
a selector for selecting target memory locations within the available memory 
locations at which to store the modified data; and 

a storage unit for storing the modified data at the target memory locations. 

10 

■^J 1 1 6 The system of claim 1 1 5 wherein a subset of available memory locations are located 
1 3 within file system locations, 

^ ^ - 1 1 7 The system of claim 1 1 5 wherein a subset of available memory locations are located 
f:W outside file system locations. 

118 The system of claim 115 further comprising a map generator for generating a map of the 
target memory locations, 

20 119 The system of claim 1 1 8 wherein the storage unit stores the map of target memory 
locations at the target memory locations. 

120 The system of claim 115 fiarther comprising means for encrypting the modified data and 
wherein the storage unit stores the encrypted modified data. 

25 

121 The system of claim 120 wherein the means for encrypting fiirther encrypts the modified 
data with an encryption key. 

122 The system of claim 121 wherein the means for encrypting fiarther encrypts the 
30 encrjrption key. 
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1 23 The system of claim 115 wherein the memory locations reside on a system and wherein a 
table of contents identifies files stored on the system^ and wherein a subset of the memory 
locations used for storing the modified data are between memory locations used by files 

5 stored on the system, as identified by the table of contents. 

1 24 The system of claim 115 wherein the memory locations reside on a system and wherein a 
table of contents identifies files stored on the system, and wherein a subset of the memory 
locations used for storing the modified data are exclusive of memory locations of files 

10 Stored on the system, as identified by the table of contents. 

Q 125 The system of claim 115 wherein the memory locations reside on a system and wherein a 
'^^ table of contents identifies files stored on the system and identifies memory locations at 

' " which the files are stored, and wherein the modified data are stored at memory locations 

f 15 occupied by the files, as identified by the table of contents, 

•i 126 A system for preventing unauthorized use of digital content data hosted on a system 
comprising: 

a modification unit for modifying the digital content data with saturation data to 
20 generate modified data; and 

a storage unit for storing the modified data at predetermined memory locations on 
the system to deter unauthorized access of the digital content data. 

127 The system of claim 126 fixrther comprising subdividing the digital content data into data 
25 segments and modifying the data segments. 

128 The system of claim 126 further comprising means for determining whether an 
unauthorized attempt at accessing the digital content data occurs, and, in the event of 
unauthorized access, means for generating saturation traffic on the system to deter the 

30 unauthorized activity, 
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129 The system of claim 128 wherein the saturation traffic comprises system commands that 
burden system resources. 

5 130 The system of claim 129 wherein the system commands are generated as a function of 
activity utilizing the system resources subject to the unauthorized access. 

1 3 1 The system of claim 128 wherein the means for determining whether an unauthorized 
attempt at accessing the digital content data occurs monitors activity of the system 

10 hosting the digital content data and determines whether the activity is inconsistent with 

= the type of digital content data being hosted. 

132 The system of claim 126 further comprising means for interleaving the digital content 
■ data with second data to generate interleaved data. 



133 The system of claim 126 further comprising means for tokenizing the digital content data 
with token data. 



; f 1 34 A system for preventing unauthorized use of digital content data hosted on a system' 
20 wherein a table of contents identifies files stored at memory locations of the system 

comprising: 

a table of contents for identifying a first memory location referring to a location at 
which at which first data file is stored; 

a modification unit for modifying the first memory location in the table of 
25 contents to refer to a second data file at a second location; and 

access means for, upon an attempt at access by the system of the first data file, 
accessing the second data file if the attempt is unauthorized. 



135 
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The system of claim 134 wherein the access means further accesses the first data file if 
the attempt is authorized. 
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136 A system for preventing unauthorized use of digital content data hosted on a system 
wherein a table of contents identifies files stored at memory locations of the system 
comprising: 

5 a table of contents for identifying a first memory location referring to a location at 

which at which first data file is stored; 

means for copying the contents of the first data file to a second memory location; 

and 

means for replacing the first data file with a second data file; 
10 access means for, upon an attempt at access by the system of the first data file, 

; i accessing the second data file if the attempt is xmauthorized. 

137 The system of claim 136 wherein the access means accesses the first data file if the 
^ ■•'^ attempt is authorized. 

138 A system for preventing unauthorized use of digital content data hosted on a system 
.3 comprising: 

; means for monitoring an operating system interface of the system to determine 
^ "j- access of operating system resources; and 

20 means for repeatedly generating a shim on the operating system interface to deter 

unauthorized access of the digital content data. 

139 The system of claim 138 wherein the shim is generated in the event of an unauthorized 
access, 

25 

140 The system of claim 138 wherein the shim is repeatedly generated periodically, each 
shim being regenerated following a predetermined time period. 
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141 The system of claim 138 wherein the shim comprises first and second shims generated on 
the operating system interface for operation in front of and behind the unauthorized 
access respectively. 

5 142 The system of claim 138 wherein the means for generating the shim further initiates an 
operation that generates saturation data. 

143 A system for preventing unauthorized use of digital content data hosted on a system 
comprising: 

10 means for substituting a portion of the digital content data with token data to 

i S generate tokenized data; and 

% means for storing the tokenized data at predetermined memory locations on the 

system to deter unauthorized access of the digital content data. 



i; h5 144 The system of claim 143 further comprising means for subdividing the digital content 
data into data segments and substituting a portion of the data segments. 

12 145 The system of claim 143 further comprising means for interleaving the digital content 
Q data with second data to generate interleaved digital content data. 

20 

146 The system of claim 143 further comprising: 

means for determining whether an unauthorized attempt at accessing the digital 
content data occurs; and 

means for generating saturation traffic on the system to deter the unauthorized 
25 activity in the event of unauthorized access. 

147 The system of claim 146 wherein the saturation traffic comprises system commands that 
burden system resources. 
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The system of claim 143 wherein the token data comprises lexical equivalents of 
assembly language conmiands. 



149 The system of claim 148 wherein the lexical equivalents are consumed by a system 
5 interpreter, in turn generating alternative assembly language commands selected to 

obfuscate the digital content data to deter unauthorized access thereof. 

150 A system for preventing unauthorized use of digital content data hosted on a system 
comprising: 

10 an assassin process for monitoring an operating system interface operating on the 

13 system and the digital content data to determine whether an unauthorized attempt at 

, 5 accessing the digital content data occurs; and 

I': means for deterring the unauthorized access and communicating the unauthorized 

ff\ access to the operating system interface, in the event of unauthorized access. 

hp 

1 5 1 The system of claim 1 50 wherein the assassin process further determines whether 

.^2 secondary assassin processes are located on the operating system interface, and, if so, 
i causes the secondary assassin processes to exit, 

20 1 52 The system of claim 1 50 wherein the means for deterring unauthorized access comprises 
means for generating saturation data to deter the unauthorized activity. 

153 The system of claim 150 wherein the assassin process assembles a list of authorized 
accesses and compares a newly generated process with the list to determine a status of the 

25 newly generated process as being authorized or unauthorized. 

154 The system of claim 153 wherein the assassin process further tracks descendant processes 
of processes on the list to determine the status of the descendant process. 
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155 A system for preventing unauthorized use of digital content data in a system having 
memory locations comprising: 

a scanner for scanning the system to determine available memory locations based 
on a file system identifying locations of files on the system; 
5 means for selecting target memory locations within the available memory- 

locations at which to store the digital content data; and 

a storage unit for storing the digital content data at the target memory locations. 

1 56 The system of claim 155 wherein a subset of available memory locations are located 
10 within files identified by the file system locations. 

h 1 57 The system of claim 155 wherein a subset of available memory locations are located 
between files identified by the file system locations. 

|5 158 The system of claim 1 55 wherein a subset of available memory locations are located 
_ outside the file system locations. 

V 159 A system for preventing unauthorized use of digital content data in a system having 
memory locations wherein the system enables a user to select from a plurality of tool 

20 modules, each module providing a service for protecting digital content from 

unauthorized use such that a user can protect digital content. 

1 60 The system of claim 1 59 wherein the tool modules comprise modules that perform 

fixnctions selected fi*om the group of functions consisting of: interleaving; tokenization; 
25 obfuscation; saturation; translocation; shimming and assassination. 
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